Red Hat Security AdvisoryRHSA-2026:52807
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-08-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images podman-5:6.0.2-2.2.hum1@aarch64, podman-5:6.0.2-2.2.hum1@src, podman-5:6.0.2-2.2.hum1@x86_64 +8
Fixes 2 records
Priority HIGH 66
The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory.
CVSS 4.0HIGH 7.1· Local · No auth · User interaction · EPSS 0.0044 · Published 2026-08-18 · Partial fix · 0.3.0, 0.38.0 +3 CWE-59
Priority MEDIUM 40
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2026-08-19 · Partial fix · 0.31.2 CWE-22
